7.0.0Desktop
Added 15
- Add query for HTTP redirects
- Add urlQueryParam filter
- Add option to configure max-time per request
- Add date comparison predicates
- Add pinnedpubkey cli option
- Add base64 url safe encode and decode filters
- Parse curl's --cookie flag
- Add toHex filter
- Add first and last filters
- Add support for negative values for nth filter
- Add option to configure pinnedpubkey per request
- Support template in nth filter parameter
- Implement predicate isUuid
- Add --ntlm cli option
- Add --negotiate option
Changed 6
- Add replaceRegex filter and fix replace filter to not take regex
- Show curl command when error format option is set to long
- Show hurl --help with color
- Remove hex crate dependency
- Small tweaks to --test progress output
- Improve captures error messages when filter chain returned no value
Fixed 12
- Fix incorrect curl command for POST redirect
- Fix hurlfmt to disallow invalid header argument in curl command
- Parse verbose flag in curl command
- Keep secret value forever, even if a secret variable override an existing one
- Fix zsh completion
- Parse cookie Expires date attribute with '-'
- Replace deprecated libxml2 initGenericErrorDefaultFunc with xmlSetGenericErrorFunc
- HTML report: fix span for lines in comment
- Fix HTML closing tag for line with trailing comment
- Fix request body during redirections
- Fix "variables" token in GraphQL HTML export
- Support negative index in jsonpath
Security 1
- Fix JavaScript injection in HTML report through regex literal
7.0.0 (2025-07-28)
Thanks to @ecolinet, @theoforger, @Muntaner, @ashishajr, @patkujawa-wf, @niklasweimann, @alanbondarun, @benkio, @dhth, @verigak, @markphilpot, @lambrospetrou, @aresler, @nfj25, @nwellnhof, @YannickAlex07, @lu-zero, @RaghavSood, @tjbrockmeyer,
Take a tour of this new version here!
Breaking Changes:
- Add replaceRegex filter and fix replace filter to not take regex #4018
Enhancements:
- Add query for HTTP redirects #922
- Add urlQueryParam filter #2199
- Show curl command when error format option is set to long #2226
- Add option to configure max-time per request #3162
- Add date comparison predicates #3480
- Add pinnedpubkey cli option #3563
- Add base64 url safe encode and decode filters #3840
- parse curl's --cookie flag #3877
- Show hurl --help with color #3882
- Add toHex filter #3963
- Add first and last filters #3998
- Remove hex crate dependency #4011
- Small tweaks to --test progress output #4028
- Add support for negative values for nth filter #4050
- Add option to configure pinnedpubkey per request #4084
- Add timeline link on status label in source and run pages #4128
- Support template in nth filter parameter #4152
- Implement predicate
isUuid#4179 - Improve captures error messages when filter chain returned no value #4214
- Add --ntlm cli option #4216
- Add --negotiate option #4246
Bugs Fixed:
- Fix incorrect curl command for POST redirect #2797
- Fix hurlfmt to disallow invalid header argument in curl command #3668
- Parse verbose flag in curl command #3760
- Keep secret value forever, even if a secret variable override an existing one #3898
- Fix zsh completion #3938
- Parse cookie Expires date attribute with '-' #3956
- Replace deprecated libxml2 initGenericErrorDefaultFunc with xmlSetGenericErrorFunc #3975
- HTML report: fix span for lines in comment. #4002
- Fix HTML closing tag for line with trailing comment #4017
- Add replaceRegex filter and fix replace filter to not take regex #4018
- Fix request body during redirections #4073
- Fix "variables" token in GraphQL HTML export #4117
- Support negative index in jsonpath #4154
Security Issues Fixed:
- Fix JavaScript injection in HTML report through regex literal #4125